The page provides information on configuration of metadata.xml file and how it can be authenticated and added into servers of the IDP, for SAML authentication.
Release | Yes/No |
|---|---|
| 8.3.x |  |
RDBMS | Yes/No |
|---|---|
| Oracle Server | |
| Microsoft SQL Server | |
| CSS2 | |
Release | Yes/No |
|---|---|
| >1.15 | |
- Configure AIP Console for SAML authentication.
To import the metadata.xml file, please follow the below steps -
- First we need to generate a Self signed certificate using command:
On Windows:<JRE home>\bin\keytool-genkey -alias mycert -keyalg RSA -keystore "C:\ProgramData\CAST\AipConsole\AipConsole\certificate.jks - Enable HTTPS as mentioned in the doc Changing Console and Node port numbers - activating HTTPS
- Copy the sample AIP Console Meta Data file by navigating to https://localhost:<portnumber>/saml/metadata and share it to the IT/IDP team. You can generate this after restarting the Console for the first time after configuring to use the SAML. SAML authentication)
- This Metadeta.xml file needs to be shared with the IT Team so that, they will register it in the SAML server and provide you with the metadata.xml file to configure.
- Place the file in the machine and specify the path under security.saml.metadata.source in the aipConsole.properties file
During the installation of the AIP Console
Post installation using aipConsole.properties
Description of option
SAML metadata source security.saml.metadata.source= Specify the location for the metadata source (as outlined in IDP MetaData generation), for example:
Windows: <AIP_console_installation>\AipConsole\data\MetadataFile.xmlLinux: $HOME\CAST\AipConsole\data\MetadataFile.xml- You can also specify:
- a http resource by providing a full URL to the metadata file
- a classpath resource using "classpath:myMetadataFile.xml"
Note - If the Metadata.xml file is not authenticated with the IDP server from the IDP provider, we will end up with an error while configuring AIP Console with SAML.
- You can also specify:
- If the above steps do not solve your issue then contact CAST Technical Support. with the following Relevant input
Relevant Input
- Log file showing the error
- A detailed list of the steps done
- Screenshots from AIP Console showing the issue and configuration of SAML.
Ticket # 29434
